PERMISSION TOKEN MANAGEMNET SYSTEM, PERMISSION TOKEN 
MANAGEMENT METHOD, PROGRAM AND RECORDING MEDIUM 



BACKGROUND OF THE INVENTION 
5 1. Field of the Invention 

The present invention relates to a permission 
management technique in a terminal such as a mobile phone, 
and in particular, to a permission management technique 
which is effective at the time of downloading application 

10 programs and at the time of executing downloaded 
application programs. 
2. Description " of the Related 7\rt 

In recent years, mobile terminals such as mobile 
phones download application programs and perform a variety 

15 of processing using the downloaded application programs 
(see, for example, the Japanese Patent Application Laid- 
open No. 20D2-140499 and the Japanese Patent Application 
Laid-open No. 2001-318996) . 

However, the aforementioned conventional art has the 

20 following problems since it only downloads application 
programs from servers in accordance with downloading 
manipulations performed by users. That is, there is a case 
that a permission (a function restricted for security 
purpose) for normally operating the downloaded application 

25 program is not installed in the mobile terminal. In such a 



case, it only wastes the communication cost for downloading 
the application program. Further, there is another case 
that the downloaded application program starts by 
automatically using a permission installed in the mobile 
terminal, so that the user may suffer damages. It should 
be noted that as permissions, data such as a telephone book 
or an address book related to the user's privacy is used. 

. . In order to solve these problems, a mobile terminal 6 
may contain a permission management system 7, for example, 
as shown in Fig. 5. 

The permission management system 7 includes a 
searching means 71 and a permission table 72.. 

The permission table. 72 stores attribute information 
including permission character strings (such as. java. lang. 
Object) indicating respective permissions installed in the 
mobile terminal 6, and conditions of use of the permissions 
(for example, identifiers of application programs capable 
of using the permissions) . 

When an application program is to be downloaded from 
a server (not shown), an installer 8, before downloading, 
obtains from the server a permission character string 
indicating a permission necessary for normally operating 
the application program. Then, the installer 8 inputs the 
permission character string obtained from the server into 
the permission management system 7. 
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When the permission character string is input from 
the installer 8, the searching means 71 in the permission 
management system 7 searches data stored in the permission 
table 72 according to the input permission character string 
5 as shown in Fig. 6 (Step S61). 

- In a case that the corresponding permission character 
string exists in the permission table 72 (YES in Step S62) , 
the searching means 71 informs the installer 8 that the 
corresponding permission character string exists in the 

10 permission table 72 (Step S63) . 

In contrast, in a case that the corresponding 
permission character string does not exist in the 
permission table 72 (NO in Step S62) ,, the searching means 
71 informs the installer 8 that the corresponding 

15 permission character string does not exist in the 
permission table 72 (Step S64). 

The installer 8, when receives information^ from the 
permission management system 7 that the corresponding 
permission character string exists, downloads the 

20 application program from the server. When receives 

information from the permission management system 7 that 
the corresponding permission character string does not 
exist, the installer 8 does not download the application 
program. In such a case, the installer 8 informs the user 

25 that the permission for normally operating the application 
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program is not installed. 

Further, in a case that the application program 
downloaded from the server is to be executed at a launcher 
9 by using the . permission installed in the mobile terminal 
5 6, the identifier of the application program to be executed 
at the launcher 9 and the permission character string 
indicating the permission to be used are input into the 
permission management system 7. 

When the permission character string and the 
10 identifier are input from the launcher 9, the searching 
means 71 in the permission management system 7 searches 
data stored in the permission 'table 72 according to the 
.input permission character string, as shown in Fig. v 7 , (Step 
S71) . 

15 In a case that the corresponding permission character 

string does not exist in the permission table 72 (NO in 
Step S72), the searching means 71 outputs an instruction of 
not authorizing the use to the launcher 9 (Step S76) . 
In contrast, in a case that the corresponding 

20 permission character string exists in the permission table 
72 (YES in Step S72), the searching means 71 determines 
whether to authorize the use of the permission or not, 
according to the attribute information making a pair with 
the permission character string and the input identifier of 

25 the application program (Step S73) . 
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When the searching' means 71 determined to authorize 
the use (YES in Step S74), the searching means 71 outputs 
an instruction of authorizing the use to the launcher 9 
(Step S75) . When the searching, means 71 determined' not to 
5 authorize the use (NO in Step S74), the searching means 71 
outputs an instruction of not authorizing the use to the 
launcher 9 (Step S76) . 

When an instruction of not authorizing the Use is 
output from the permission management system 7, the 
10 launcher 9 informs it to the user. In contrast, when an 
instruction of authorizing the use is output from the 
permission management system 7 1 , the launcher .9 allows the 
downloaded application program to execute processing using 
the permission. 

15 By installing the permission management system 7 in 

the mobile terminal 6 as shown in Fig. 5, such 
inconveniences that an application program incapable of 
being normally operated on the mobile terminal 6 is 
downloaded, or a downloaded application program 

20 automatically uses a permission installed in the mobile 
terminal, can be solved. 

The permission management system 7 shown in Fig. 5 
determines whether a permission necessary for normally 
operating an . application program intended to be downloaded 

25 is installed in the mobile terminal 6 or not, and also 
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determines whether to authorize the downloaded application 
program to use the permission installed in the mobile 
terminal 6. When determining, the permission management 
system 7 searches the permission table using a permission 
5 character string having large number of characters. 

Therefore, there is a problem that the processing speed is 
low. 

SUMMARY OF THE INVENTION 

10 It is therefore an object of the present invention to 

speed up a process of determining whether a permission 
necessary for normally operating an application program 
intended to be downloaded is installed in the terminal. or 
not, and a process of determining whether to authorize the 

15 downloaded application program Jto use the permission 
installed in the terminal or not, by speeding up a 
searching process. 

In order to achieve the aforementioned object, a 
permission token management method according to the, present 

20 invention comprises the steps of: storing tokens which 
correspond respectively to a plurality of permissions 
installed in a terminal and are calculated by a 
predetermined conversion process performed to permission 
character strings indicating the permissions; when a 

25 permission character string' indicating a specific • 
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permission is input, performing the predetermined 
conversion process to the permission character string; and 
searching a token table using a token which is a conversion 
result of the conversion process, and determining whether 
the token exists in the token table or not. 

Further, a permission token management system for 
performing the permission token management method according 
to the present invention comprises: a token table for 
storing tokens which correspond v respect ively to a plurality 
of permissions installed in a terminal and are calculated 
by a predetermined conversion process performed to 
permission character strings indicating the permissions; a 
conversion means for, when a permission character string 
indicating a specific permission is input, performing the 
predetermined conversion process to the permission 
character string; and a searching means for searching the 
token table using a token which is a conversion result of 
the conversion means, and determining whether the token 
exists in the token table - or not. 

A program for causing a computer to execute each step 
described above may be recorded in a recording medium. 

Further, it is possible to build a program as an 
electric signal for causing. a computer to execute each step 
described above . 

The aforementioned present invention is intended for 
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speeding upa searching process. The present invention, in 
which this function is applied to. downloading of 
application programs, may comprise, in order to perform in 
high speed a process of determining whether a permission 
necessary for normally operating an application program to 
be downloaded is installed in a terminal or' not: a token 
table for storing tokens which correspond respectively to a 
plurality of permissions installed in a terminal and are ' 
calculated by a predetermined conversion process performed 
to permission character strings indicating the permissions; 
a search request/saving means for, when a permission 
character string indicating a permission necessary for. 
normally operating an application program to be downloaded 
is input, outputting a search request including the 
permission. character string; a conversion means for 
performing a conversion process to the permission character 
string included in- the search request . output from the 
search request/saving means, and outputting a token which 
is a conversion result; and a first searching means for 
searching the token table using the token output from the 
conversion means to thereby determine whether -a permission 
required for normally operating the application program is 
installed in the terminal or not . 

Further, the permission token management system of 
the present invention may comprise, in order to perform in 
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high speed a process of determining whether to authorize a 
downloaded application to use a permission installed in a 
terminal or not: a token attribute information table in 
which, relating to each. of a plurality of permissions 
5 installed in the terminal, a token of the permission and 
attribute information including conditions of use are 
registered in correspondence with each other; a permission 
database; a token obtaining means for, when the permission 
character string indicating the permission desired for use 

10 is output from the application program at the time of 
executing the application program, outputting a token 
obtaining request including th'e permission character string 
to the conversion means and receiving a token output from 
the conversion means responding to the token obtaining 

15 request; and a second searching means for determining 

whether to authorize the application program to use the 
permission or not, in accordance with the attribute 
information of the permission corresponding to the token, 
which is obtained by searching the permission database 

20 using the token received by the token obtaining means. The 
permission token management system may be so configured 
that the conversion means has. a function of, responding to 
the token obtaining request from the token. obtaining means, 
performing the predetermined conversion process to the 

25 permission character string which is being requested for 
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obtaining the token, and outputting the conversion result 
to the token obtaining means, and the search request /saving 
means has a function of, when the permission necessary for 
normally operating the application program is determined by 
5 the first searching means to be installed in the terminal, 
obtaining the attribute information of the permission from • 
the token attribute information table and registering the 
attribute information and the token of the permission in 
the permission database in correspondence with each other. 
10 In the present invention, the conditions of use of 

the permission may include an identifier of the application 
. .program. 1 

Further, in the present invention, the conversion 
means may have a function of obtaining a hash value 
15 corresponding to the permission character string. 

Further, in the present invention, the token has less 
number of characters than that of the permission character 
string. 

20 (Operation of the invention) 

In a token table within which searching is performed 
when determining a permission is installed in a terminal or 
not, there are stored tokens which correspond respectively 
to a plurality of permissions installed in the terminal and 

25 are calculated by a predetermined conversion process (for 
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example, a process for converting a permission character- 
string to a hash value) performed to permission character 
strings indicating the permissions. In a permission 
database within which searching is performed when 
5 determining whether to authorize the downloaded application 
program to use the permission or not, there are stored 
pairs of tokens indicating permissions and attribute 
information including conditions of use of the permissions. 
When a permission character string indicating a 

10 permission to be searched is input, the permission 

character string. is converted into a token such as a hash 
value. Then, using the converted token, the token table 
and the permission database are searched. It is therefore 
possible to perform the searching process in higher speed, 

15 comparing to the case of searching which uses the 
permission character string having more number of 
characters. Consequently, a process for determining 
whether a permission necessary for normally operating an 
application program to be downloaded is installed in the 

20 terminal or not, and a process for determining whether to 
authorize the downloaded application program to use the 
permission installed in the terminal or not, can be speeded 
up. 

25 BRIEF DESCRIPTION OF THE DRAWINGS 



12 

Fig. 1 is a block diagram showing an embodiment of 
the present invention;. 

Fig. 2 is a block diagram showing an exemplary 
structure of the permission token management system 10; 
5 Fig. 3 is a flowchart showing an exemplary process of 

downloading an application program; 

Fig. 4 is a flowchart showing an exemplary process of 
executing an application program; 

Fig. 5 is a block diagram showing an exemplary 
10 structure of a permission management device which is 
devisable for solving problems in conventional art; 

Fig. 6 is a flowchart showing an exemplary process 
for downloading an application program using the device 
shown in Fig. 5; arid 
15 Fig. 7 is a flowchart showing an exemplary process 

for executing .an application program in the device shown in 
Fig. 5. 

PREFERRED EMBODIMENT OF THE PRESENT INVENTION 
20 In Fig. 1, the reference numeral 1 indicates a 

terminal such as a mobile phone, and the reference numeral 
2 indicates an application server to which the terminal 1 
accesses. The application server 2 has a function of 
downloading an application program to the terminal 1 
25 responding to a request from the terminal 1. As for this 
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terminal, desk-type or notebook-type personal computers may 
be used, besides mobile phones. It should be noted that 
explanations will be given below with respect to a case of 
using a terminal such as a mobile phone as the terminal 1. 
5 The terminal 1 comprises a permission token 

management system 10, an installer 20, a launcher 30, and a 
recording medium K. 

The permission token management system 10 has a 
variety of functions. As for these functions, first, there 

10 is a function of determining, when a permission character 
string indicating a permission necessary for normally 
operating an application program intended to be downloaded 
from the installer 20 is input, whether the permission is~ 
installed in the terminal 1 or not. In addition, there is 

15 another function, of determining, when a permission 

character string indicating a permission desired to be used 
is input from an application program which is being 

executed in the launcher 30, whether to authorize the 

■» 

application program to use the permission or not, and the 
20 like. 

The permission token management system 10 including 
the aforementioned functions has the structure shown in Fig 
2. 

As shown in Fig. 2, the permission token management 
25 system 10 comprises a permission token conversion device 11 
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a permission checking device 12, and a permission database 
13. 

The permission token conversion device 11 includes a 
hash value calculating means 111, a first searching means 
5 112, and a token table. 113. The permission checking device 
12 includes a search request /saving means 121, a hash value 
obtaining means 122, a second searching means 123, and a 
token attribute information table 124. 

The token table 113 stores permission character 

10 strings corresponding respectively to a plurality of 

permissions installed in the terminal 1, and tokens (having 
less number of characters thaA that of the permission 
character strings) . Tokens corresponding to respective 
permission character strings are different, arid in this 

15 embodiment,, hash values corresponding to the permission 
character strings are set as tokens. It should be noted 
that a hash function used for calculating the tokens stored 
in the token table 113 and a hash function used for 
calculating hash values in the hash value calculating means 

20 111 are the same. In the example shown in Fig. 2, a token 
of a permission indicated by a permission character string 
' java. lang. Object' is shown as 'I 1 , a token of a 
permission indicated by a permission character string 'java 
lang. Thread' is shown as ! 2'. 

25 The token attribute information table 124 stores, 
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with respect to each of a plurality of permissions 
installed in the terminal 1, the token of the permission 
and the attribute information including conditions for use 
in correspondence with each other. In the present 
embodiment, attribute information corresponding to a 
permission should include an identifier of an application 
program capable of using the permission as a condition for 
use. 

The search requesting/saving means 121' has the 
following functions: 

- prior to downloading an application program, when a 
permission character string indicating a permission 
necessary for normally operating the application program is 
input from the installer 20, a function of outputting a 
search request including the permission character string to 
the hash value calculating means 111; 

- when such a search result that a token corresponding to 
the permission character string being requested for search 
exists is output from the first searching means 112, a 
function of outputting to the installer 20 an instruction 
to authorize downloading, obtaining from the token 
attribute information table 124 attribute information 
corresponding to the token, and storing in the permission 
database 13 the obtained attribute information and the 
token in correspondence with each other; and 
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- when such a search result that a token corresponding to 
the permission character string being requested for search 
does not exist is output from the first searching means 112, 
a function of outputting to the installer 20 an instruction 

5 not to authorize downloading. 

The hash value ■ obtaining means 122 has the following 
functions: • 

- when, from an application program being executed in the 
launcher 30/ a permission character string indicating a 

10 permission desired to be used and an identifier of the 

application program is input, a function of outputting a 
request for obtaining a hash value including the permission, 
character string to the hash value calculation means 111; 
and 

15 - when data of the hash value is output from the hash value 
calculating means 111 responding to the request for 
obtaining the hash value, a function of outputting the hash 
value and the identifier of the application program to the 
second searching means 123. 

20 The hash value calculating means 111 has the 

following functions: 

- when a search request including a permission character 
string is transmitted from the search request /saving means 
121, a function of calculating a hash value corresponding 

25 to the permission character string and outputting data of 
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. the hash value to the first searching means 112; and 

- when a request for obtaining a hash value including a 
permission character string is transmitted from the hash 
value obtaining means 122, a function of calculating a hash 

5 value corresponding to the permission character string and 
outputting data of the ,hash value to the hash value 
obtaining means 122. 

The first searching means 112 has the following 
functions: 

10 - when data of a hash value is input from the. hash value 
calculating means 111, a function of searching the token 
table 113 using the data of th'e hash value, and searching 
whether a token matching the hash value is stored in the 
token table 113 or not; and — 

15 - a function of outputting the search result to the search 
request /saving means 121. 

The second searching means 123 has the following 
functions: 

- when data of a hash value is input from the hash value 

20 obtaining means 122, a function of searching the permission 
database 13 using the data of the hash value, and searching 
whether a token matching the hash value is stored in the 
permission database 13 or not; 

- in a case that the token matching the hash value used for 
25 searching is stored in the permission database 13, a 
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function of determining, according to attribute information 
making a pair with the token and an identifier of an 
application program, whether to authorize the application 
program to use the permission or not, and outputting an 
5 instruction of the determined result to the launcher 30; 
and ... 

- in a case that the token matching the hash value used for 
searching is not stored in the permission database 13, a 
function of outputting an instruction of not authorizing 

10 the use of the permission to the launcher 30. 

The recording medium K comprises a disc, a 
semiconductor memory, and oth^r recording media. The 
recording medium K has a program for functioning the CPU of 
the micon (computer) installed in the terminal 1 as the 

15 permission token management system 10. 

The program kept in the recording medium K is read 
out by the CPU of the micon (computer) installed in the 
terminal 1, and by controlling the operation of the CPU 
with the program, functions as the hash value calculating 

20 means 111, the first searching means 112, the search 

request /saving means 121, the hash value obtaining means 
122, and the second searching means 123 are executed. 

(Operations) 

25 Next, operations of the present embodiment will be 
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explained in detail. 

First, an operation when downloading an application 
program will be explained in detail. 

When downloading of an application program is 
5 instructed by a user of the terminal 1, the installer 20 

obtains from the application server 2, prior to downloading 
the application program, a permission character string 
indicating a permission necessary for normally operating 
the application program. Then, the installer 20 inputs the 
10 permission character string obtained from the application 
server 2 into the permission token management system 10 . 

When the permission character string is input from 
the installer 20, the search request /saving means 121 in 
the permission token management system 10 outputs a search 
15 request including the permission character, string to the 
hash value calculating means 111 (Fig. 3, Step S301). 

When the search request is input , the hash value 
calculating means 111 calculates a hash value corresponding 
to the permission character string being requested for 
20 search using the predetermined hash function, and outputs 
data of the calculated hash value to the first searching 
means 112 (Step S302) . 

The first searching means 112 searches within the 
token table 113 using the data of the hash value input from 
25 the hash value calculating means 111 (Step S303) . 
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In a case that a token matching the hash value input 
from the hash value calculating means 111 is stored in the 
token table 113 (YES in Step S304), the corresponding token 
(same value as the hash value) is output to the search 
5 request/saving means 121 (Step S305) . 

In contrast, in a case that a token matching the hash 
value input from the hash value calculating means 111 is 
not stored in the token table 113 (NO in Step S304), an 
instruction indicating that the corresponding token does 
10 not exist is output to the search request /saving means 121 
(Step S306) 

When the instruction indicating that the token does 
not exist is input from the first searching means 112 (NO 
in Step S307) ,■ the search request /saving means 121 outputs 

15 an- instruction of not authorizing the download to the 
installer 20 (Step S310) . With this instruction, the 
installer 20 invalidates the downloading instruction from 
the user, and not performing downloading of the application 
program. Further, the installer , 20 indicates on an 

20 indicator, not shown in the Figures, that the application 
program is not to be downloaded since the permission 
necessary for normally operating the application program 
instructed to be downloaded is not installed in the 
terminal 1. 

25 In contrast, when the token is input from the first 
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searching means 112 (YES in Step S307), the search 
request/saving means 121 obtains from the token attribute 
information table 124 attribute information making a pair 
with the token stored in it, and stores the pair of 
5 obtained attribute information and the token in' the 

permission database 13 (Step S308) . For example, in a case 
that the token '2' is output from the first searching means 
112, the search request /saving means 121 obtains from the 
token attribute information table 124 'attribute 

10 information 2' making a pair with the token ? 2 ! , and stores 
the pair of the token '2' and the 'attribute information 2 ? 
in the permission database 13.' 

Then, the search request/saving means 121 outputs to 
the installer 20 an instruction to authorize downloading 

15 (Step S309) . With this instruction, the installer 20 

downloads the application program instructed by the user 
from the application server 2, and installs it in the 
terminal 1. 

Next, an operation when executing the application 
20 program downloaded from the application server 2 in the 
manner as described above will be explained. 

An application program downloaded form the 
application server 2 and executed on the launcher 30, when 
using a permission installed in the terminal 1, outputs a 
25 permission character string indicating the permission to be 
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used and an identifier of the application program itself. 

When the permission character string and the 
identifier of the application program are input from the 
launcher 30, the hash value obtaining means 122 in the 
5 permission token management system 10 outputs a request for 
obtaining a hash value including the permission character 
string to the hash value calculating means 111 (Fig. 4, 
Step S41) . 

When receiving the request for obtaining the hash 

10 value, the hash value calculating means 111 calculates, 

using the predetermined hash function, the hash value of 
the permission character string being requested for 
obtaining the hash value, and outputs data of the 
calculated hash value to the hash value obtaining means 122 

15 (Step S42). When the data of the hash value is input, the 
hash value obtaining means 122 outputs the hash value and 
the identifier of the application program to the second 
searching means 123. 

The second searching means 123 searches the 

20 permission database 13 using the data of the hash value 

input from the hash value obtaining means 122 (Step S43) . 

In a case that the token matching the hash value is 
not found (NO in Step S44), the second searching means 123 
outputs an instruction not to authorize the use of the 

25 permission to the launcher 30 (Step S48) . 
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In contrast, in a case that the token matching the 
hash value, is found (YES in Step S44), the second searching 
means 123 determines whether to authorize the use of the 
permission or not, according to the contents of the 
5 attribute information making a pair with the token and the 
identifier of the application program (Step S45) . That is, 
since the attribute information includes the identifier of 
the application program to be authorized to use the 
permission, the second searching means 123 determines 

10 whether to authorize the use or not, according to the fact 
whether the attribute information includes the same . 
identifier as the identifier of the application program 
requesting the use of the permission. 

If determined to authorize using the permission (YES 

15 in Step S46), the second searching means 123 outputs an 

instruction to authorize the use to the launcher 30 (Step 
S47) . If determined not to authorize the use of the 
permission (NO in Step 4 6), the second searching step 123 
outputs an instruction not to authorize the use to the 

20 launcher 30 (Step S48) . 

When an instruction not to authorize the use is input, 
the launcher 30 stops the application program being 
executed. When an instruction to authorize the use is 
input, the launcher 30 allows the application program to 

25 perform processing using the permission. 
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In the aforementioned embodiment, although the token 
table 113 stores pairs of permission character strings and 
tokens, it may only store tokens. However, by storing 
pairs of permission character strings and tokens as the 
5 embodiment, it is possible to know immediately what kinds 
of permissions are installed in the terminal 1 by referring 
to the contents of the token table 113. Further, although 
identifiers of application programs are set as conditions 
for use included in the attribute information in the 
10 aforementioned embodiment, security, level information or 
information about application program providers may be 
acceptable. 

(Effects of the Invention) 
15 As described above, the present invention has the 

following effects. 

j 

A first effect is to speed up a searching process. 
The reasons, are as follows. That is, in the token table 
and the permission database within which searching is 

20 performed, tokens such as hash values are installed instead 
of permission character strings, when a permission 
character string indicating a permission to be searched is 
input, the permission character string is converted into a 
token such as a hash value. Then, using the converted 

25 token, the token table and the permission database is 
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searched. 

A second effect is to speed up a process of 
determining whether a permission necessary for normally 
operating an application program intended to be downloaded 
5 is installed in a terminal or not. The reason is that 

searching within the token table can be performed with high 
speed. 

A third effect is to speed up a process of 
determining whether to authorize a downloaded application 
10 program to use a permission installed in the terminal or 
not. The reason is that searching within the permission 
database can be performed with' high speed. 

A forth effect is to reduce memory utilization. The 
reason is that tokens such as hash values having less 
15 volume of. data are stored instead of permission character 
strings . 



